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C^ ' Abstract 



in 



A projective, smooth, absolutely irreducible algebraic curve X of genus g 

defined over a finite field ¥q is called optimal if for every other such genus g 

*-o ' curve Y over F, one has #y(Fq) < ^X(Fq). In this paper we show that for 

g < 5 there is a unique optimal genus g curve over F2. For g — G there are 
precisely two and for g = 7 there are at least two. 



H 

• ■ 1 Introduction 

C^ . Let X be a projective, smooth and absolutely irreducible genus g curve defined over a 

finite field ¥g. It is well known that the number of F^-rational points of X is bounded 
and a lot of research has been done to determine whether the bounds are sharp: 
see for example Sections 5.2 and 5.3 of Sti for an overview. The curve X is called 
optimal if for every other genus g curve Y over F^ one has #y(F^) < ^X{¥q). The 
main result of this paper deals with uniqueness up to F2-isomorphism of small genus 
0^ ■ optimal curves defined over F2. 

in 

^^ ' Theorem 1.1. For g < 5, there exists a unique optimal genus g curve defined over 

\f^ . F2. There exist two non-isomorphic genus 6 optimal curves and at least two non- 

f^ ' isomorphic genus 7 optimal curves defined over ¥2 ■ 



o 






Examples of small genus optimal curves defined over F2 are already present in [5] , 
[Sl| and [N-Xi . In this paper we show that for genus 5 < 5 these examples are unique, 
while one of the genus 6 curves we construct appears to be new. 
The proof of this result consists of two steps. We first determine a short list of Zeta 
functions that an optimal curve over F2 can have. In Section[2]we show that for genus 
g < 5 there is only one possible Zeta function, while for g = 6 there are two. Next we 
apply class field theory techniques as in [A] , [L] , |Schj , [S] , [Sl] , and recent results by 
Howe and Lauter in p-L to show that for each possible Zeta function there exists 
precisely one curve. In Section |3] we discuss curves of genus and 1. Sections U to [5] 
are devoted to curves of genus 2 to 6. Finally, in Section [9] we exhibit two optimal 
genus 7 curves with different Zeta functions. 
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2 Zeta function and real Weil polynomial of a curve 

Throughout this paper a curve is understood to be projective, smooth and absolutely 
irreducible over a finite field of definition F^. In order to study optimal genus g curves 
defined over Fq it is of interest to determine the quantity 

Nq{g) := max{#X(Fq) | X is a genus g curve defined over F^}. 

Then, an optimal genus g curve X defined over Fg satisfies #X(Fg) = Nq{g). Several 
methods have been developed in order to determine Nq{g) for given q and g. The 
progress is listed and continuously updated in the tables |G- V| . In particular Serre 
determined very good upper bounds for the number of F^-rational points in |S1) . For 
g = 2 he gives the estimate #X(F2) < 0.885 + 5.35. For g > 2 this improves the 
Hasse-Weil bound #X{¥q) < q+l+ [2g^\. In [S^ Serre also provided examples of 
genus g curves defined over F2 attaining these bounds. Hence for small genus curves 
he proved that N2{g) is as follows (STl Theorem 5] 
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The Zeta function of a genus g curve X defined over F^ is given by 

^w - n T^. 



d>l 



{l-f^Y 



where 

In particular, ai 

where 



fld = if{P I P place of X such that deg P = d}. 
- i^X{¥q). The Zeta function Z{t) is a rational function of the form 

m 



Z{t) = 



{i-t){i-qty 



L{t) = \[{l-a^t)(l-mt) 

2 = 1 

for certain cti e C of absolute value y^. Therefore L{t) = q^t^^ + 629-1^^^^^ - 
&ii+ 1 € Z[i] is determined by the coefficients bi, . . . ,bg which are in turn determined 
by the numbers ai, . . . , Ug. See for example |Sti[ Section 5.1] for more details. 



+ 



To a genus g curve X having L{t) as numerator of its Zeta function, we associate 
the so-called real Weil polynomial of X: 



hit) = '[[it-^^^) e z[t], 



where /ii — ai + ai is a real number in the interval [— 2^/^, 2y/g], for alH = 1, ... ,5. 
We have 

L{t)=tSh{qt + l/t). (1) 



One can hence turn the problem of determining the Zeta function of X into the 
problem of determining the real Weil polynomial of X. Not every polynomial h{t) 
with all zeros in the interval [—2^, 2^Jq\ and with the property that 



L{t) 



noT^ 



{l-t){l-qt) ii(l-i<i)a. 

for certain integers a^ > is necessarily the real Weil polynomial of a curve. The 
following result is due to Serre [Si page Se 11], [Lj Lemma 1]. 

Proposition 2.1. Let h{t) he the real Weil polynomial of a curve C over ¥q. Then 
h{t) cannot be factored as h{t) = hi{t)h2{t), with hi{t) and /i2(i) non-constant poly- 
nomials in 1,[t] such that the resultant of hi{t) and /i2(i) is ±1. 



This result has been generalized by E. Howe and K. Lauter. Proposition l2.2l below 
is an improvement [Hj of |H-L1 Theorem l.b)] and Proposition 12 . 31 is [H-L, Theorem 
1, Proposition 13]. Recall that the reduced resultant of two polynomials f,g & Z[t] is 
defined to be the non-negative generator of the ideal (/, g) n Z. 

Proposition 2.2. Let h{t) = hi{t)h2{t) be the real Weil polynomial of a curve C 
over ¥q, where hi(t) and h2{t) are coprime non- constant factors in Z[i]. Let r be the 
reduced resultant of the radical of hi(t) and the radical ofh2{t). Ifr = 2, then, there 
exists a degree 2 map C ^ C , where the curve C is defined over ¥q and has either 
hi(t) or h2{t) as real Weil polynomial. 

Proposition 2.3. Let h{t) — {t — /i)/i2(i) be the real Weil polynomial of a curve C 
over ¥q. where t — fi is the real Weil polynomial of an elliptic curve E and h2{t) a 
non- constant polynomial in 'Ij\t\ coprime witht — [i. If r ^ ±1 is the resultant oft — pi 
and the radical of h2{t), then C admits a map of degree dividing r to an elliptic curve 
isogenous to E. 

For a curve X we denote by a{X) the vector [oi, a2, . . .]. The main result of this 
section is the following. 

Theorem 2.4. For g < 6 the real Weil polynomial h(t) and the vector a{X) of an 
optimal genus g curve X over ¥2 are as follows: 

.9 = 1; h{t)=t + 2, a(X) = [5,0,0,5,4,10, ...]; 

.9 = 2: h{t)=t^ +3t + l, a(X) = [6,0,1,1,6,12,...]; 

.9 = 3: h{t) =t^ + At^ + 3i - 1, a{X) = [7, 0, 1, 0, 7, 7, . . .]; 

.9 = 4: h{t) = {t + l){t + 2)(t2 + 2t - 2), a{X) = [8, 0, 0, 2, 4, 8, . . .]; 

5 = 5: h{t)=t{t + 2)^{t^ + 2t-2), a(X) = [9,0, 0, 2, 0, 12, . . .]; 

5 = 6: 

h{t)=t{t + 2){t^ + 5t^ + 5t^-5t-5), a(X) = [10,0,0,0,3,10, ...], (2) 

h{t)^{t-l){t + 2){t^+3t + lf, a(X) = [10,0,0,0,2,15,...]. (3) 



Proof. Following [Si page Se Th 38] we compute for each <? < 6 a finite list of monic 
degree g polynomials h(t) G Z[i] for which ai is equal to the number of F2-rational 
points of an optimal genus g curve and for which a^ > for d > 2 in the relation 
L{t) = Ph{qt + 1/t). Moreover we require that hit) has the property that its zeros 
are in the interval [— 2-\/2, 2\/2]- Finally, we require that the conditions of Proposition 
12.11 are satisfied. A short computer calculation gives a unique polynomial for g < 5 
and three polynomials for g = 6: 

(1) /i(t) = t(i + 2)(t'* + 5t3 + 5i2-5t-5), a(X) = [10,0,0,0,3,10, ...]; 

(2) h{t) = {t - \){t + 2){t^ + it + if , a(X) = [10,0,0,0,2,15,...]; 

(3) h{t) = (t+ l)(t + 2)(t2 + 2t- 2)(t2 + 2< - 1), a{X) = [10, 0, 0, 1, 0, 12, . . .]. 

We show that the third polynomial cannot occur. The resultant of the factors 
t + 2 and {t + l){t'^ + 2t - 2){t'^ + 2t - 1) is -2. Hence, by Proposition [131 a genus 
g = 6 curve X, having this polynomial as real Weil polynomial, admits a degree 2 
map X ^f E, where E is a, genus one curve having real Weil polynomial t + 2. The 
curve E has parameters a{E) — [5, 0, 0, 5, 4, 10, . . .], hence E has five places of degree 
4 while X has only one. Since E does not have any degree 2 places, this means 
that one place Q of the degree 4 places of E must ramify in X. The different D 
of the quadratic function field extension ¥2{X)/¥2{E) satisfies 2Q < D (where the 
coefiicient 2 is forced by wild ramification). On the other hand the degree of the 
different is 2(7 — 2 = 10 = deg D by the Hurwitz formula. Thus D — 2Q + 2R, where 
i? is a rational point of E. But this is a contradiction because all of five rational 
points of E split completely in X since #X(F2) = 10. D 

3 Uniqueness of optimal elliptic curves 



In this section we prove Theorem 11.11 for curves of genus and 1. 

Remark 3.1. We denote by P^ the projective line over ¥2 and by 0, 1 and cx) its 
three rational points. Over a finite field, every genus curve is isomorphic to P^. 
Therefore P^ is optimal. The Zeta function of P^ is 

Z{t) = ^^ _ and hence a(pi) - [3, 1, 2, 3, 6, . . .]. 

Proposition 3.2. Up to ¥2-isomorphism, the unique genus 1 curve having five ra- 
tional points over ¥2 is the elliptic curve E of affine equation y^ + y = x^ + x. 

Proof. A genus 1 curve E over F2 having five rational points over F2 is an elliptic 
curve. Hence E admits a separable degree 2 morphism to P^. It can be described as 
a smooth cubic in P^ of affine equation of the form y^ +a(x)y = /(x), where a(x) and 
f{x) are polynomials in F2[a;], the first of degree or 1 and the latter of degree 3 |Sil[ 
Appendix A]. Since the point at infinity cx) of P^ ramifies in E, one has a{x) = 1. The 
affine points and 1 of P^ have to split, thus we have that /(O) = /(I) = and hence 
/(x) = x{x + l)(x + a), where a € F2. If a = 1 we find the equation y^ + y = x'^ + x 
and if a = the equation y^ + y ^ x^ + x'^. These two curves are indeed isomorphic 
over F2 by changing coordinates through the map {x,y) 1— >■ (x + l,y). D 



Remark 3.3. The function field of the genus 1 curve E can also he described as 
the ray class field of P^ of conductor 4 times a rational point, in which the other 
two rational points of P^ are both split. Since Aut(P^) acts doubly transitively on 
{0, l,oo}, different choices give rise to isomorphic ray class fields. 

Remark 3.4. We often refer to this unique optimal elliptic curve E throughout this 
paper. For future reference, we present here some properties of E. In terms of the 
affine equation y^ + y — x^ +x, we denote the five rational points of E as follows: we 
write Pq for the point at infinity and we put 

Pi = (0,0), P2 = (0,l), P3 = (l,0), Pi = (1,1). (4) 

The real Weil polynomial of E is h{t) = t + 2. The vector a{E) of the numbers Od of 
places of degree d ~ 1,2,... of E is given by 

a{E) = [5,0,0,5,4,10,20,...]. 

Let a e Fig be a root o/ x* + a; + 1 . Then, the five places of degree A of E have 
coordinates 

Qi = (a^, a^ + a), Q2 = {a^ ,a^ + a + 1), 
Q3 = (a^ + l,a), Q4 = (a^ + l,a+l), Qg = {a^ + a+l,a). 

Let b € F32 be a root of x^ + x^ + 1, then the four places of degree 5 of E consist of 
the points of coordinates: 

Ri = {b, 6^), i?2 = {b, 6^ + 1), i?3 = (6 + 1, &^ + &), i?4 = (fo + 1, 6^ + fo + 1). 

Let c G Fg4 be a root of x^ + a;"'' + 1 =0. The places of degree Q of E have coordinates 

Ti = (c^ + c3 + c2 + c + 1, c^ + c^ + c3 + 1), T2 = (c^ + c'^ + c'' + c,c* + c' + c), 

T3 = (c^ +c^ + l,c^+c^+ c), Ti = {c^ +c^ + l,c^+c^+c+ 1), 

T5 = (c + 1, c'^ + c^ + c^ + c), Tg = (c + 1, c^ + c3 + c^ + c + 1), 

T7 = (c3 + c2,c+l),T8 = (c3 + c2,c), 

Tg = (c, c'^ + c^ + C^), Tio = (c, c'^ + c^ + c'^ + 1). 

The order 5 automorphism a of E given by addition of Pi acts transitively on E{¥2) 
as follows: Pq f-^ Pi f-^ P3 f-^ Pi f-^ P2 '-^ Pq ■ The action of a on the places of degree 
4 is as follows: Qi h- > Qg t-^ Q2 '-^ Qi '-^ Q3 '-^ Qi- On the other hand, the order 4 
automorphism of E 

T : {x,y) 1-^ {x + l,y + X + 1) 

fixes Pq and acts transitively on the remaining four rational points: Pi h- > P4 h- > P2 i^- 
P3 H- > Pi . Similarly, t fixes Q^ and acts transitively on the remaining degree 4 places: 
Qi >— > Qi I— > Q2 H- Q3 '-^ Qi- The action of t on the places of degree 5 is transitive: 
i?i 1-^ P4 H^ i?2 i-> ^3 i-> Pi • 



4 Uniqueness of genus 2 optimal curves 



Proof of Theorem \l.l\ for g — 2. A genus 2 optimal curve X over F2 is hyperelliptic. 
Since X has six rational points, all three rational points of P^ split completely in the 
double covering X — >■ P^ . By Theorem 12.41 the curve X has no places of degree 2 
and only one place of degree 3. Thus only one degree 3 place Q of the two degree 3 
places of P^ totally ramifies in X. The different D of the corresponding function field 
extension is hence 2Q, since 2Q < D and degl? = 6 by the Hurwitz formula. Any 
genus 2 curve having six rational points over F2 is hence a double covering of F^ of 
conductor 2Q, where Q is a place of P^ of degree 3, in which all rational points of 
P^ are split. A different choice of the degree 3 place of P"'^ leads to an F2-isomorphic 
curve. Indeed, the F2 -isomorphism x 1— >■ 1/x preserves the rational points of P^, but 
switches the two degree 3 places. D 

5 Uniqueness of genus 3 optimal curves 

We briefly recall some important results on the Jacobian variety of a curve in order 
to state and prove a useful lemma. 

Let X be a curve defined over F,. We denote by J'ac{X) the Jacobian variety 
of X and by Tg the Tate module attached to J^ac(X), where £ is a prime number 
different from the characteristic of F^. We set Ve — T^ (g) Q^. Let F : Vg -^ Ve 
be the Frobenius map and let V : Vi ^ Vi be the Verschiebung map: the unique 
map such that V o F ^ q. Then Z[F,V] C F,iid{Jac{X)). Next we let 4> be the 
canonical polarization on J^ac{X). Then (j) can be represented as a non-degenerate 
alternating form (p : Vi x Vi —?' Qi. Here Qi denotes the field of £-adic numbers. 
Since (f){F(x), F{y)) = q(j){x,y) for every x,y € Vi, by bilinearity of (j) we have that 
(j)iF{x),F{y)) = q(t>ix,y) = </)(gx, y) = (t>iV {F (x)) , y) . It follows that (t>iz,F{y)) - 
(/)(F(z), y) for any y,z G Vg. In other words V is left adjoint to F with respect to <j>. 

Theorem 5.1 (Torelli Theorem |Wj). Let X and X' he two curves over a perfect 
field k. Let r : J^ac{X) — ^ J^ac{X') be an isomorphism over k compatible with the 
canonical polarizations. Then 

L if X is hyperelliptic, there exists a unique isomorphismf : X ^ X' over k which 
gives t; 

2. if X is not hyperelliptic, there exists a unique isomorphism / : X — > X' over k 
and a unique e G {±1} such that f gives er. 

Corollary 5.2. If t is an automorphism of J^ac{X) over k preserving the polariza- 
tion, then either t or — r comes from an automorphism over k of X . 

Lemma 5.3. Any genus 3 curve X having exactly seven rational points over ¥2 
admits an automorphism of order 7. 

Proof. We show that for a genus 3 curve X having seven rational points over F2 the 
ring Z[F, V] C Find{J'ac{X)) is isomorphic to ^[Cy], the ring of integers of ^(Ct)- The 



minimal polynomial of F + ^ is the real Weil polyomial of X. By Theorem 12 .41 this is 
h{t) = i^+4i^ + 3t— 1. It is an irreducible polynomial of discriminant 7^ . Hence, for a 
root a e Q of /i(t), the number field Q(a) is a cyclic extension of degree 3 of Q, which 
is ramified only at 7. By the Kronecker- Weber Theorem the field Q(a) is hence the 
unique degree 3 subfield Q(C7 + C7^) of QCC?) £^nd Z[a] is its ring of integers. Consider 
now the minimal polynomial of Frobenius x^ — ax+2 S Z[a][a;]. Its discriminant a^ — 8 
has norm 7 and hence generates a prime ideal tt C Z[a] lying over the prime 7 of Z. 
By class field theory Q(a) admits a unique quadratic extension unramified outside 
of TT and the three infinite primes lying over 7. This is the field Q(C7), which has 
discriminant 7^ by the conductor-discriminant formula. The discriminant of Q(q;, x) 
can be computed to be 7^ as well by means of the relative discriminant formula for 
towers of number fields. Hence Z[F, V] = Z[a, x] is the ring of integers Z[^7] of Q(C7) 
as wanted. 

Now Jac{X) has in particular an automorphism t of order 7 corresponding to Cr- We 
show that T preserves the polarization cf). By bilinearity of 4> and since V is the complex 
conjugate of F, the left adjoint to an element r e Z[F, V] is its complex conjugate 
T. Since r satisfies tt = 1, we have in particular that (p{T{x),y) = (f>{x,T{y)) = 
(j){x,T^^{y)) for any x, y in Vi. This implies that (f>{T{x),T{y)) = (j){x,y) for any 
x,y € Vi. In other words r preserves the polarization of J^ac{X). By the above 
Corollary of Torelli's Theorem the curve X admits hence an automorphism / of 
order 7. Indeed if / does not induce r of order 7, but / induces — r, then /^ is an 
automorphism of order 7 oi X. D 

Proof of Theorem \l.l\ for g = 5. By Lemma [5.3l the curve X admits an automorphism 
/ of order 7. Then, by Galois correspondence, X is a cyclic covering of degree 7 of a 
curve which can only be P^ by comparing the genera and the degree of the different 
in the Hurwitz formula. By the conductor-discriminant formula, the conductor D of 
such a covering satisfies 6degD = 18. Since there are seven rational points on X, 
only one rational point P of P^ splits completely. Thus one has D — Q, where Q is a 
place of P^ of degree 3. Hence X is a cyclic degree 7 covering of P^ of conductor Q, 
where one rational point P of P^ splits completely. Different choices of P in {0, 1, cx)} 
and of the degree 3 place Q give rise to F2-isomorphic curves. Indeed, since the 
automorphisms group of P^ acts transitively on the rational points, we can always 
first reduce to the case P = oo. Next the automorphism a: i— >■ x + 1 fixes P and maps 
one degree 3 place of P^ into the other one. D 

6 Uniqueness of genus 4 optimal curves 



Proof of Theorem \l.l\ for <? = 4. By Theorem 12.41 the real Weil polynomial of an op- 
timal genus 4 curve X overF2 is h{t) ^ {t+\){t + 2){t^ + 2t~2). The resultant of the 
polynomials i -f 2 and (t -I- l)(t^ -I- 2i — 2) is 2. Proposition [2]3] implies therefore that 
the curve X is a double covering of the unique optimal elliptic curve E having real 
Weil polynomial t + 2 described in Remark 1 3. 4 1 Since X has no places of degree 2, no 
rational point of E can be inert in X . Hence, since X has eight rational points, there 
is only one possibility for the five rational points of E: three of them split completely 



and two are totally ramified. Denoting by P and P' the two wildly ramified rational 
points of E, we have that the contribution to the different of the quadratic function 
field extension F2(X)/F2(-E') is at least 2P + 2P' . Since the degree of the different 
has to be 6 by the Hurwitz formula, the different, which is also the conductor of the 
extension, is AP + 2P' or 2P + 4P'. Thus any optimal genus 4 curve over F2 is a 
double covering of the optimal elliptic curve E of conductor AP + 2P' or 2P + 4P', in 
which the other three rational points of E split completely. Uniqueness of X follows 
from the fact that A\xi{E) acts doubly transitively on E(^2) as described in Remark 
EH D 

7 Uniqueness of genus 5 optimal curves 

Lemma 7.1. Let C he the hyperelliptic curve over ¥2 of ajfine equation y^ + y = x^ + 
x^ . Let P be a rational point ofC and let K be the ray class field of ¥2(0) of conductor 
AP in which all rational points of C except P split completely. Then K = F2(C) except 
when P is the point at infinity, in which case we have [K : F2(C)] = 2. 

Proof. Let t denote a uniformizer at P and let S = C(F2)\{P}. By Artin reciprocity 
the Galois group Qal{K/¥2{C)) is isomorphic to the S'-ray class group of C modulo 
AP |N-X[ Section 2.5]. In this case the latter is isomorphic to a quotient of i? == 

{¥2[[t\]/{t'^)X ~ Z4 X Z2 by the S-unit group of C [Schl Section 8]. We show that ff 

P is the point at infinity of C we have Qal{K/¥2(C)) ~ Z2. On the other hand, if P 
is one of the other rational points 

Po = (0, 0), Pi, = (0, 1), Pi = (1, 0), or P[ = (1, 1) 

of C, the group Qal{K/¥2{C)) is trivial. A sketch of the computations follows. 

i) Let P be the point at infinity of C. Then a basis for the S'-unit group of C 
consists of the functions with principal divisors given by 

(^) = 2P„ + P{-3P^, 

= 3(P^ - Po) + 2(Pi' - Pi), 

[-r) - p^-Po + pi-K 

Let t — y/x^ be a uniformizer at P, then their images in R are: 

y + x^ 
x^ 

y + 1 
y 

x + 1 



y 

'X+l 



+ t : 


modi^, 




1 

+ - 

y 


^1 + t' 


= 1 modf* 


i 

+ - 


^1 + t' 


modf*, 



since l/y = t^ + 0{t^) and l/x = t^ + 0{t'^). The element 1 + t generates 
a subgroup R' of R of index 2 and 1 + i^ (= i?'. Therefore ^a;(ii:/F2(C)) ~ 
R/R' ~ Z2. 

m) Let P ~ Pa and a; a uniforniizer at P. In this case consider the two F2-hnearly 
independent S-units of divisors given by 

[x + l) = Pi+P[-2P^, 
(y+1) = 3P^ + 2Pi'-5Poo. 

Here P^o denotes the point at infinity of C. By means of Hensel's lemma, we 
compute the local expansion of y a,t Pq as y ~ x^ +x^ + 0{x^). Therefore their 
images in R are 

a; + 1 = 1 + X mod x , 
y+1 = 1 + x^ mod a;"*. 

In this case the group R is generated by the images of the S'-units and thus the 
quotient group is trivial. 

The other possibilities for P reduce to case ii) by applying the order 4 automorphism 
(fi : {x,y) I— >■ {x + l,y + x"^ + 1) of C. It fixes the point at infinity of C and acts 
transitively on the other rational points of C. D 



Proof of Theorem \l.l\ for g — 5. By Theorem 12.41 a genus 5 optimal curve X defined 
over F2 has real Weil polynomial h{t) = t{t + 2)^(i^ + 2t — 2). Since the principal 
ideal (i(i + 2),i^ + 2t — 2)nZ is generated by 2, Proposition 12 .21 implies that the curve 
X is a double covering of a curve C having real Weil polynomial either t{t + 2)^ or 
t^ + 2t ~ 2. If C had t{t + 2)^ as real Weil polynomial, it would be a genus 3 curve 
having seven rational points over F2, which is impossible by Theorem 12.41 
Hence C is a genus 2 curve having five rational points and no place of degree 2. Every 
genus 2 curve defined over F2 is a hyperelliptic curve. Up to F2-isomorphism there 
exists a unique hyperelliptic curve C over F2 having real Weil polynomial t^ +2t — 2. 
Indeed such a hyperelliptic curve has five rational points and no place of degree 2. 
Thus the different of the function field extension associated to the double covering 
C — >■ P"'^ has to be 6Q, where Q is a rational point of P^. According to the classification 
of genus 2 curves over F2 in [M-N| page 327], by taking Q — 00, any such hyperelliptic 
curve is F2-isomorphic to a projective curve of afRne equation y'^+y = x^ +ax^ +bx'^ +c, 
with a,b,c G F2. Of the eight possible equations arising from the choice of the 
parameters a, b, c, only the affine equation y'^ + y = x^ + x^ describes a projective 
curve having five rational points over F2 and no places of degree 2. 
Since X has nine rational points, only one rational point P of C ramifies in the 
double covering X ^ C, while the other four rational points of C split completely 
in X. The different of F2(X)/F2(C) is hence 4P, since it must have degree 4 by the 
Hurwitz formula. The function field ¥2{X) is hence an abelian extension of F2(C) 
of conductor 4P, where the other four rational points of C split completely. The 
maximal among such abelian extensions is the ray class field K described in Lemma 
rm Hence P is the point at infinity of C and F2(X) = K. D 



8 Genus g = 6 optimal curves 



Theorem 12.41 lists the two possible real Weil polynomials of an optimal genus 6 curve 
defined over F2. In this section we give a proof of the existence of a unique genus 6 
curve for each of the two listed polynomials. 

Proposition 8.1. Up to ¥2- isomorphism, there is a unique curve having real Weil 
polynomial as in ^ of Theorem,\ 



Proof. Let X be a genus 6 optimal curve defined over F2 having real Weil polynomial 
h{t) = t{t + 2)(t* + 5t^ + bt^ - 5i - 5). Since the resultant of the factors i + 2 and 
t(i'' + 5i'^ + 5i^ — 5i— 5) is —2, there exists a degree 2 morphism X ^ Ehy Proposition 
12.31 All of the five rational points of E split completely into the ten rational points of 
X. By the Hurwitz formula the degree of the different of V2{X)/V2{E) is 10. Now, 
since a2{X) = az{X) = a4^{X) = 0, the different is precisely 2i?, where i? is a degree 
5 place of E. Thus, any such optimal genus 6 curve is a double covering of E of 
conductor 2i?, in which all rational points of E are split. As observed in Remark 13.41 
the elliptic curve E has actually four points of degree 5 and the F2-automorphism r 
of E acts transitively on them. The choice of a different degree 5 ramifying point, 
gives thus an F2-isomorphic curve. D 

In the rest of the section, let X be a genus 6 optimal curve over F2 having real 
Weil polynomial as in ([3|) of Theorem 12.41 



Proposition 8.2. Up to ¥2-isomorphism, there is a unique curve having real Weil 
polynomial as in ^ of Theorem\2.4\ 



Lemma 8.3. The curve X is a non-Galois covering of degree 3 of the elliptic curve 
E such that X is unramified outside of E{¥2). 

The following definition introduces a notation for the splitting behavior of the 
rational points of the elliptic curve E. 

Definition 8.4. Let X ^^ E be a degree 3 covering defined over ¥2- Consider a 
rational point P of E. We say that P is 

a) an A-point, if P splits completely in X; 

b) a B -point, if P splits into two points of X , one unramified and the other one 
with ramification index 2; 

c) a C -point, if P is totally ramified in X with ramification index 3. 

Moreover we denote by a, b, c the number of A-points, B-points and C-points of E 
respectively. 

Proof of Lemma WT^ By Theorem 1 2. 4[ the real Weil polynomial of X is h{t) — {t — 
l)(i+2)(i2 + 3t+l)2. Since the resuhant of the polynomials t+2 and {t-l){t^ + 2,t+l) 
is equal to 3, by Proposition 12.31 the curve X admits a morphism of degree 3 to the 
optimal elliptic curve E described in Remark 13.41 Since the parameters of X are 
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a{X) — [10,0,0,0,2,15,...], there are no places of degree 2 or 3 on X. Therefore 
each of the F2-rational points in E can hence be either an A-point, a S-point or a 
C-point in the sense of Definition 18.41 Then we have 



a + 5 + c=5 and 3a + 26 + c=10, 



and hence 



2a + b — 5 and a ~ c. 
This leaves us with the three cases of Table [TJ In each case the covering X — > _E is 





a 


b 


c 


case / 





5 





case // 


1 


3 


1 


case /// 


2 


1 


2 



Table 1: Splitting behavior of the rational points oi E in X 

non-Galois since b is never zero. Moreover the function field extension ¥2{X)/¥2{E) 
is unramified outside of E{¥2). Consider indeed the degree of the different, which is 
10 by the Hurwitz formula. By Definition 18.41 only one of the two points of X lying 
over a i3-point of E is wildly ramified. This gives a contribution to the degree of the 
different which is at least 2. The contribution to the different that comes from the 
rational points of E is therefore at least db + 2c with d > 2. Therefore it is at least 
5 • 2 = 10 in case /, at least 3 • 2 + 2 = 8 in case // and at least l-2-|-2-2 = 6in 
case III. Since there are no points of degree 2, 3 or 4 on X, any other non-rational 
ramified place of E should have degree strictly larger than 4. But this would give a 
too large contribution to the different in each of the three cases. Hence there arc no 
other places of E ramifying in X but those of degree one. D 

Definition 8.5. We denote by X the curve whose function field is the normal closure 
of¥2{X) with respect to F2(£').' it is a Galois extension of¥2{E) having Galois group 
isomorphic to the symmetric group S3. We denote by X' the curve having as function 
field the quadratic extension of ¥ 2(E) corresponding to the group A3 c^ Tj^, the unique 
(normal) subgroup of S3 of index 2 . The situation is described in the following picture: 




X Y Z X' 




We sum up some arithmetical properties of X' and X in the following auxiliary 
lemmas. 
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Lemma 8.6. 

a) The A-points of E split completely in X and X'. 

b) Over each B -point of E there are three points of X , each with ramification index 
2 and there is one point of X' with ramification index 2. 

c) Over each C -point of E there is a unique place of X of degree 2. 

Proof. Let Y be the degree 3 covering of E as in the picture above. 

a) Each A-point P oi E sphts completely over ¥2{Y) ~ ¥2{X) as well. Hence the 
function field of X, being the compositum of ¥2{X) and ¥2{Y), is the splitting 
field of P. Moreover, since the function field of X' is contained in it, P splits 
completely in X' as well. 

6) Since there is more than one point of X lying over a B-point P of E, the decom- 
position groups of the points lying over P have order 2. Since the ramification 
index of one of the points of X lying over P is 2, all points of X lying over P 
have ramification 2. It also follows that there is a unique point of X' lying over 
P. It has ramification index 2. 

c) Let P be a C-point of E. Since the order of the inertia group of any of the 
points of X lying over P has order divisible by 3, the same is true for a point 
P' of X' lying over P. It follows that X — >■ X' is a cyclic degree 3 covering that 
is ramified at P' . Therefore, by class field theory, the multiplicative group of 
the residue field of P' must have order divisible by 3. It follows that P must be 
inert in X' . Indeed, in this case the residue field of P' is F4. _ 

Lemma 8.7. The curve X' is defined over ¥2 and has genus g' — 6 — c. Moreover, 
the covering X' ^ E is ramified exactly at the B-points of E. 

Proof. Since X ^ E is unramified outside of E{¥2) by Lemma 15751 the same holds for 
the covers X and X' of E. Lemma [8761 implies then that X' —> E is ramified precisely 
at the i?-points of E. By Table [T] there is always at least one such point. Thus, 
since the residue field of any place contains the constant field, the constant field of X' 
is F2. In order to compute the genus of X' we compare the different DiS{X' /E) of 
¥2{X')/¥2{E) with the different DiS{X/E) oi¥2{X)/¥2{E). By the Hurwitz formula 
we have that 10 = 2-6-2 = degBiS{X/E) = degBiS{X/E)tame + degBiS(X/E)^ud- 
The contribution given to DiS{X/E) by the c tamely ramified points is 2c. Therefore 
the contribution of the b wildly ramified points is 10 — 2c. Since these are precisely 
the points that are ramified in X' — >■ E, the degree of DiS{X' /E) is also equal to 
10 — 2c. It follows that 2g' — 2 = 10 — 2c, so that 5' = 6 — c as required. D 
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Lemma 8.8. For low degrees d, the number Od oj places of degree d of the curves X 
and X' are as follows: 

ai(X)=6a + 3b, ai{X') = 2a + b; 

a2(X)=c, a2{X')=c; 

a3(X)=0, 03(^0 =0; 

ai(X) = 0, a^iX') = 10; 
as W = 0. 

Proof. The computation of the numbers ai{X) and ai{X') of F2-rational points of X 
and X' respectively, foUows directly by Lemma [8761 By the same Lemma the degree 2 
places of X' are precisely the ones lying over the C-points of E and they are themselves 
totally ramified in X. This gives a2{X') = c = a2{X). Because of Theorem 12.41 the 
curve X has parameters a{X) — [10,0,0,0,2,15,...] and in particular a^lX) = 0. 
Since also a3(_E) — 0, it follows at once that a3{X') = a3{X) = 0. The curve X has 
no places of degree 2 or 4, thus 04 (X) — 0. Moreover this means that the five places 
of degree A oi E are inert in X. Since they are not ramified, their decomposition 
group has to be cyclic and hence of order 3. Therefore they are split in X' and we 
have 

ai{X') ^2a4E) == 2 • 5 == 10. 

Suppose that 05 (X) is not zero, then one of the places of degree 5oi E splits completely 
in X. This implies that X has at least three places of degree 5, which is not the case. 
Therefore as (X) =0. D 

The following Lemma describes abelian extensions Kd of F2(ii^) for particular 
choices of the conductor D. These extensions play a role in the proof of Proposition 
18.101 The divisor Z? is a sum of points in £'(F2). See Remark 13.41 for the notation. 

Lemma 8.9. Let Kd denote the ray class field of¥2{E) of conductor D in which the 
point at infinity and all places of degree 4 of E split completely. Then Kjj is trivial 
when D = 4Pi+ 2P2 + 2P3 orD = 2Pi+ 2P2 + 4P3 . It has degree 2 over ¥2 (E) when 
D = 2Pi+4P2 + 2P3. 



Proof. Let Qi,Q2, ■ ■ ■ ,Q5 denote the degree 4 places of E as listed in Remark 
and let S — {Qi,Q2,Q3,Q4:,Q5, Pq}- A basis for the S'-unit group of E is given by 
the following functions u^, i = 1, . . . , 5: 

with (ui) = Qi + Q2 - 8P0, 
with (M2) = Q3 + Q4 - 8P0, 
with (U3) = Qs - 4Po, 

M4 = '"/ ' r \T 9 7 — "TTT' with (m4) = Qi + 2(53 - 3(5s, 

y(y + x)[x'' + X + l)'^ 

"^ = (, + i)(y + ,)(^2+, + i)3' ^ith [u,) = Q4 + 2Qi - 3gs. 
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1 


= X^ 


+ 


x^ + x^ 


+ 


x + l, 


2 


^x^ 


+ 


x^ + 1, 






3 


^x^ 


+ 


2: + 1, 








(y 


+ 


x^)(y + 


x^ 


+ x^f 



Then consider the ray class field Kd' of F2(-E') of conductor D' = 4Pi + 4P2 + 4P3 
in which the places in S split completely. We are interested in the ray class fields 
Kd^, j = 1,2,3, that are subfields of Kd' of conductor Di = 4Pi + 2P2 + 2P3, 
D2 = 2P1+4P2+2P3 and D3, = 2P1+2P2+4P3. The corresponding S'-ray class groups 

modulo Dj are quotients of the groups Rj = (F2[fe]]/(t^)) ® fcife'H/l^)) ® 

(V2[[tj"]]/{t'j„)] ~ Z4 X Z2 X Z2 X Z2 by the image of the S'-unit group of E [Schl 
Section 8] . Here tj , tji , tjn denote uniformizers of Pj , Pji , Pjh respectively, for 
{j,j',j"} = {1,2,3}. We show that the order of the S'-ray class group modulo Dj 
is 2 for j = 2, while for j — 1,3 this group is trivial. In Table [21 we display in the 
column marked by Rj, j = 1, 2, 3, the images of the Ui's {i ^ 3) in the group Rj. We 
remark that the computations for the units U4 and M5 can be performed calculating 
the local expansions yj of y at Pj, for j = 1, 2, 3: 



yi = 


= x + x^ + x^ +x'^ + x^ + 0{x'^). 


y2 = 


= 1 + x + x^ +x^ +x'^ + x^ + 0{x^), 



2/3 



= t'^ +t^ +t'^ + t^ + 0{t''),wheTet = x + l. 



Ui 


Ri 


R2 


i?3 


Ml 


il + hj-'il + h) 


(l+ti)(l+i2)^ 


(l + il)(l+tg)(l + t2) 


M2 


{l + fi){l + t,) 


{l+fi){l+t,) 


(1 + ^3)^ 


U4 


{i + hy{i + fi){i + h) 


{i + hm + q) 


l+t2 


U5 


l + t3 


(l + i^)(l+t3) 


(l+t3)^(l+t^) 



Table 2: Images of the m's in the group Rj, for j = 1, 2, 3. 



One checks that in P2 the images of the m^'s for i ^ 3 generate a subgroup of 
index 2. The image of U3 is (1 + ti)(l + i2)'^(l + ^Dll + '-s) ^'^d li^s hence in the 
same subgroup. On the other hand, the images of the u^'s, J 7^ 3, are independent 
generators of i?i: the image of ui has order 4 and the images of M2, M4 and U5 have 
order 2. Thus in this case the ray class group is trivial. Similarly for the images of 
ui, U2, Ui and U5 in P3: also in this case the ray class group is trivial. D 

Proposition 8.10. All rational points of E are ramified in X' . The curve X' has 
genus 6 and real Weil polynomial h{t) = t(t + 2)(i^ — 5)^. In other words, only the 
configuration of case I in TableUl is possible. 

Proof. According to Table [1] there are three possibilities for the splitting behavior of 
the rational points of i? in X. Moreover by Lemmas 18. 71 and 18.81 the genus g' and the 
vector a{X') of the curve X' are in the three cases as follows: 





a 


b 


c 


g' 


a(X') 


case / 





5 





6 


[5,0,0,10,...] 


case // 


1 


3 


1 


5 


[5,1,0,10,...] 


case /// 


2 


1 


2 


4 


[5,2,0,10,...] 
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Case /// cannot occur since in this case the curve X' would be a genus 4 curve having 
Af4 = iV + 2a2 + 4a4 = 5 + 2-2 + 4-10= 49 rational points over F24 , while Ni{A) = 45 
according to |G- V) . 

In case // a computer calculation gives only one possible real Weil polynomial for 
X' , namely h{t) = {t + 2)(i^ — 5)(t^ — 2). Now, since the automorphism group of E 
acts doubly transitively on £'(F2) as described in Remark WM we may assume that 
the point at infinity Pq of E is the unique A-point of E and that P4 = (1,1) is the 
unique C-point. The remaining three rational points of E are {Pi,P2,P3}- They 
are -B-points of E and hence ramify \n X' ~^ E by Lemma 18.61 Moreover, since 
ai{X') = 10 and ai{E) = 5, all five degree 4 places of E split completely in X' . 
By the Hurwitz formula the degree of the different of V2{X')/¥2{E) is 8. Therefore 
Lemma [8^ implies that F2(X') is equal to the ray class field of F2(ii^) of conductor 
2Pi + 4P2 + 2P3, in which Pq and all degree 4 places of E split completely. Consider 
now the curve X. It is a degree 3 abelian covering of X' . Since X has 15 rational 
points by Lemma 15^ all five rational points of X' split completely in X. Moreover, 
since X —>■ E and X' —)' E are both unramified outside of E{¥2), only the degree 2 
place P4 of X', which lies over P4 of E ramifies in X. The curve X is hence the ray 
class field of F2(X') of conductor P4, where all rational places of X' split completely. 
A computer calculation with MAGMA shows that the associated ray class group is 
trivial. Hence case // cannot occur. 

In case / a computer calculation gives only one possible real Weil polynomial for X' , 
namely /i(i) = t(t + 2) (f2 -5)2. □ 

In the next two lemmas we describe two curves appearing in the proof of Propo- 
sition [O 



Lemma 8.11. There exists a unique curve C having real Weil polynomial h[t) = 
(t + 2)(i — 1). Up to ¥2-isomorphism, this is a genus 2 projective curve described by 
the affine equation y'^ + xy = x^ + x* + x'^ + x. 

Proof. A curve C having real Weil polynomial h{t) = (t + 2){t — 1) is a genus 2 
curve having four rational points and two places of degree 2 over F2. Since it is a 
hyperelliptic curve, we can consider the double covering C — >■ P""^ . The different of the 
corresponding function field extension is 4P + 2P', where P and P' are rational points 
of P^. Indeed, by the Hurwitz formula, the degree of the different is 6 and, since C 
has four rational points, two of the rational points of P^ are wildly ramified and one 
splits completely. The coefficients of P and P' are forced to be even since F2 (C) is an 
Artin-Schreier extension of the rational function field. Notice also that the possibility 
that two rational points of P^ split and the third stays inert in F2(C) is excluded 
by the fact that in this case the degree 2 place of P^ would be ramified, giving a 
contradiction in the computation of the different. According to the classification of 
genus 2 curves over F2 in [M-Nl page 327], by taking P — Poo and P' = (0,0), any 
such an hyperelliptic curve over F2 is F2-isomorphic to a projective curve of affine 
equation y'^ -\-y = x^ +ax + 1/x + &, with a, & S F2. There are hence four possibilities 
for the parameters a and b, but only y"^ + y — x^+x + l/x + l is the equation 
of a projective curve having four rational points over F2 and two places of degree 
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2. This curve is F2-isomorphic to the projective curve of more simple affine equation 
y^ -\-xy = x^ +x'^ + x'^ + x, an isomorphism being given by (x, y) i— >■ (x, {y + x'^) / x) . D 

Lemma 8.12. Let C be the curve of Lemma \8.11\ Then C adm,its an unramified 
cyclic degree 5 covering in which both the point at infinity Poc and the point (0, 0) 
split. This covering is unique up to isomorphism. Moreover, for any other choice of 
rational points P and P' of C , any cyclic unramified degree 5 covering of C in which 
P and P' split, is necessarily trivial. 

Proof. Consider the maximal unramified extension L of the function field K of C 
where Poo splits completely. By class field theory, the Galois group Qal{L/K) is 
isomorphic to the quotient of the class group Pic{C) by the subgroup generated by 
the image in Pic{C) of the Frobenius element FrobPoo G Qal{L/K) of P^. Hence 
Qal{L/K) ~ Pic^{C). Let h{t) be the real Weil polynomial of C as in Lemma TS-f fl 
By [Stii Theorem 5.1.15 (c)] the class number ^Pic^{C) of C equals L(l), where 
L{t) is the numerator of the Zeta function of C Since L{1) — h{q + 1) by ([1]), 
one has ^Pic^{C) = h{3) — 10. Therefore there exists a unique unramified cyclic 
degree 5 extension K' of ¥2(0) in which Poo splits completely. Since the divisor 
(x) = 2((0,0) — Poo) is principal, the Frobenius of (0,0) is trivial in Qal{K' /K) ~ 
Z5 ~ PicP{C)/lj2, so that the rational point (0, 0) is also split in K' . 
On the other hand, if we replace the points Poo and (0, 0) by any other pair of rational 
points of C, there is no such unramified cyclic degree 5 extension. To see this, we note 
that C has four rational points: Poo, (0,0), (1,0) and (1, 1). If two of these were to 
split in an unramified cyclic degree 5 covering of C, then 2 times their difference, would 
be a principal divisor. By adding or subtracting the principal divisors 2((0,0) — Poo) 
and 2((1, 0) + (1, 1) — 2Poo), this boils in each case down to the question of whether or 
not the divisor 2((1, 0) — Poo) is principal. Suppose that 2((1, 0) — 2Poo) is the divisor 
of a function / S F2(C). Since the only functions in F2(C) with a pole of order 2 at 
infinity are linear functions in x, we must have / = .t + 1, but then / also vanishes in 
(1, 1), a contradiction. D 



Proof of Proposition \8.2\ By Lemma l8.3l the genus 6 curve X is a non-Galois covering 
of degree 3 of the elliptic curve E. Moreover, by Proposition 18 . 101 the only possibility 
for the splitting behavior of the rational points of E in X is described in case / of 
Table [T] In other words, all rational points of E are P-points in the sense of Defi- 
nition 18.41 In order to show that such a curve X is unique, consider the quadratic 
function field extension ¥2{X')/'¥2{E) described in the picture of Definition 18.51 By 
the Hurwitz formula and Proposition 18.101 this is an abelian extension of F2 [E) of 
conductor X]i=o ^^* where all places of E of degree 4 split completely. 
Let r be the order 4 automorphism of E described in Remark 13.41 Then the endo- 
morphism r -t- 2 of the elliptic curve E has degree 5 and kernel E{¥2)- The Galois 
group of the covering t + 2 : E —>■ E consists of the translations by the points Pi of 
E. It preserves both the set P(F2) and the set of places of E of degree 4. Therefore 
the covering 

r+2 

X' — > E > E 
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is Galois. Similarly, the covering X — > X' is unramified and cyclic of degree 3. Lemma 
I8.8l implies that all rational points of X' are split. By class field theory, there exists a 
unique degree 3 such a covering of X' . Indeed, let h{t) be the real Weil polynomial of 
X' as in Proposition EIUl By [Stil Theorem 5.1.15 (c)] one has ^Pic'^iX') ^ L(l), 
where L{t) is the numerator of the Zeta function of X' . Hence, since by ^ one has 
L(l) = /i(3) = 2"* • 3 • 5, there exists a unique index 3 subgroup in the class group of 
X' . Thus the function field extension corresponding to the covering 



X 



E 



r+2 



-^E 



is also Galois. The Galois group G is an extension of Z5 by S'3 . Since these groups have 
coprime order and Z5 necessarily acts trivially on S'3, the Schur-Zassenhaus Theorem 
implies that G is a direct product of Z5 and S'3. By Galois correspondence there exists 
hence a tower of function fields corresponding to the morphisms of curves X — )■ y — )■ 
E, such that gal{¥2{Y)/¥2{E)) ~ S3. Let p be a generator of ^a/(F2(X)/F2(X)) C 
S3 and consider invariant fields. We obtain a cyclic covering X — > C of degree 5, 
which is unramified since t + 2 : E ^ E \s. 




Zs 



Z5 X Z2 ^ 



{1} 



Zo 



Zs X S3 ^ 



The curve C has genus 2 by the Hurwitz formula. The real Weil polynomial of C is 
thus a degree 2 factor of the real Weil polynomial of X. Since C is also a degree 3 
covering of E, the real Weil polynomial of C is divisible by the real Weil polynomial 
i + 2 of _E, since the same holds for the corresponding Zeta functions |A-P) . Hence the 
real Weil polynomial of C is h{t) = (i + 2)(t— 1). By Lemma [8. 121 the curve C indeed 
admits such an unramified cyclic degree 5 covering. Therefore there actually exists 
a unique curve X with real Weil polynomial equal to polynomial ([3]) in Theorem 12.41 
and Proposition 18. 21 follows. D 



9 Genus 7 optimal curves 

Let E be the optimal genus 1 curve of affine equation y^ -\- y = x^ + x described in 
Remark 13.41 In this last section we present a class field theoretic construction of a 
ray class field of F2 {E) whose proper quadratic subfields are function fields of optimal 
genus 7 curves. We show that the Zeta functions of these curves are not all the same, 
providing existence of at least two non-isomorphic genus 7 optimal curves over F2. 

Proposition 9.1. Let K he the function field of E and let Q denote a degree 6 place 
of K of uniformizer t — x^ + x^ + 1. Let L be the ray class field of K of conductor 2Q, 
in which all five rational points of K split completely. The Galois group Qal{L/ K) 
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is isomorphic to Z2 ® Z2 . The quadratic subfields of K are function fields of optimal 
genus 7 curves that do not all have the same Zeta function. 




Xl X2 X; 




^2 ^2 ^2 



26 



be a root of x^ + x^ + I, and let Q be the place that consists of 
■^ + a^ + 1) and its conjugates. The prime ideal corresponding to 



1, 



y 



x^ + 1). The principal divisor {x^ + x^ 



1 is 



Proof. Let a E I 

the point {a,a'^ 

Q isp = {x^ + : 

equal to Q + Q' — 12Pq where Q' is the place consisting of (a, a^ + a^ + a?) and its 

conjugates. We take t = x^ + x^ + 1 as a. uniformizer at Q. Denote by S the set of 

the five rational points of E described in Remark 13.41 

Let L be the ray class field of K of conductor 2(5, in which all five rational points 

in S split completely. Then, by Artin reciprocity, the Galois group G = Qal{L/K) is 

isomorphic to the quotient of i? = F26[[t]]*/{u : u = 1 modi^} by the image of the 

S'-unit group OJ of K. A basis for Og is given by the functions x, x + 1, y and y + x 

having the following principal divisors 



(x) = 


= P1+P2-2P0, 


(x + l) -- 


= P3 + P4-2P0, 


(y) = 


= P1+2P3-3P0, 


{x + y) = 


= 2P1+P4-3P0. 



In order to compute the image of the S'-units in R, we first observe that the image 
of the S'-unit x has order 63 modulo t and hence it generates the 63-part of R. Then 
we compute 



.63 



-l = {x + l)t 



1) 



xt 



,63 



1 

y"" - 1 = {x^ + x^)t 
{y + xf^ - 1 = (a;^ + x'^ + a;3 + x^)t 



mod t^ , 
mod t^ , 
mod t^ , 
mod t^ . 



- X^ + X^ + X' 



+ 1) by the additive 
^ This is a quotient 



Thus Qal{L/K) is isomorphic to the quotient of F2[a;]/(x^ 

subgroup H generated by a; + 1, x, cc^ + x^ and x^ 

group of order 4 where all elements have order 2. Hence Qal{L/K) ~ Z2 © Z2. 

The three subgroups of order 2 oiQal{L/K) correspond to three coverings Xi, X2 and 

^3 of E as in the diagram. Each curve Xi has ten rational points over F2, since all 

five rational places of E split completely. Since the non-trivial characters of Qal{L/K) 

have conductor 2Q, the different of each quadratic extension F2(Ai)/F2(£') has degree 

12 and the three curves have genus 7 by the Hurwitz formula. Since N2{7) = 10 by 
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Theorem 5 in [ST], they are three genus 7 optimal curves over F2. 
To show that the curves are not all isomorphic it suffices to consider the number of 
places of degree d of each curve Xi for d < A. Since the rational points of E are all 
split and E has no places of degree 2 or 3, none of the three curves Xi has places of 
degree 2 or 3 either. Therefore a curve Xi can only have places of degree 4 if some 
places of E of degree 4 split completely in Xi. By class field theory, a place P oi E 
splits completely in Xi if and only if the image of the uniformizer of P is trivial in the 
quotient Ri of R which is the ray class group of the covering Xi — >■ E. Consider the 
index 2 additive subgroups Hi = H + {x^), H2 = H + (x^) and H3 = H + {x^ + x'^) of 
¥2[x]/{x'^ + x 



1). The ray class group Ri associated to the curve Xi is isomorphic 

1) by Hi for z = 1, 2, 3. We present the 
results of the computation in Table [S] The first column lists for j ~ 1, ... ,5 the 



to the quotient group of V2[x]/{x^ + x^ 



Qj 


uj(x,y) 


gj(x) 


Hi 


Qi 


y + x'^ 


x'^ + x 


H2 


Q2 


y + x'-^ + l 


x^ 


Hi 


Q3 


y + x'^ + x'^ 


x^ +x-^ +x 


H3 


Qi 


y + x-^ +X'' + 1 


x'^ + x^ 


H3 


Q5 


x'^ +x + 1 


x^ +x-^ + x^ 


Hi 



Table 3: Splitting behavior of the degree 4 places of E in each curve Xi 



degree 4 places Qj of E as in Remark 13^ In the second and third column we display 
the uniformizers Uj{x, y)'s of the Qj's and the images 5j(a;)'s in ¥2/{x^ + x^ + I) of 
the Uj{x,y)'s. In other words we have Uj{x,y)^^ — 1 = gj{x)t modi^. In the last 
column we write Hi for i — 1, 2, 3 whenever gj{x) belongs to Hi. The curve Xi has 
four places of degree 4, since both Q2 and Q5 split. Similarly, also X3 has four places 
of degree 4. On the other hand the curve X2 has only two places of degree 4, since 
only Qi splits. Hence the two curves Xi and X2 are not isomorphic. D 



Remark 9.2. Let a and t be the automorphisms of E described in Remark \3.4\ Then, 
the action of a on the places of degree 6 of E listed in Remark \3.4\ is given by 

Ti^n^Ts^Ti^ Tio ^ Ti. 

Since the elliptic involution r^ switches Tg and Tiq we have that u^t"^ preserves Tiq. 
In terms of adding points on the elliptic curve E one has u^t"^ : {x,y) 1— ?> (1, l)~{x,y). 
A short computation shows that a^T^ switches the functions x^ and x^ + x^ modulo 
the subgroup H 0/ F2 [x] / (x® + x^ + 1). Therefore the curves Xi and X3 are actually 
isomorphic. 

For completeness we compute the real Weil polynomials of the optimal genus 7 
curves. 

Proposition 9.3. For i = 1,2, 3, the real Weil polynomial hi{t) and the vector a{Xi) 
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of the curve Xi are 

hi,3{t) ^ {t + 2){t^ + 5t^ + 3^^-151^ -Wt^+9t + 8), a{Xi^3) = [10, 0, 0, 4, 2, 5, 18, . 
h2{t) = {t+2){t^ +3t + l){t^+2t^ -4t^ -5t+2), a(X2)== [10, 0,0, 2,4, 11, 12, , 



Proof. By Remark l9.2l the curves Xi and X^ are isomorphic, therefore they have the 
same real Weil polynomial. In the proof of Proposition 19 . 1 1 we already observed that 
for the curves Xi and X2 one has ai = 10 and 02 = 03 = 0. We also proved that 
a4{Xi) = 4 while 04(^2) = 2. Similarly to what was done for the places of degree 4, 
we consider the splitting behavior of the places of degree 5 of _E listed in Remark 
and display the results in Table S) 



Rk 


Uk(x,y) 


gk(x) 


Hi 


Ri 


y + x'' 


x'"^ + X + 1 


Hi 


R2 


y + x^ + l 


x^ +x^ + x 


H3 


i?3 


y + x"^ + X 


x'^ +x'^ +x^ + 1 


H2 


i?4 


y + x"^ +X + 1 


x^ +x^ + x-^ + 1 


H2 



Table 4: Splitting behavior of the degree 5 places of E in each curve Xi. 

Summing up we have a^{Xi) = 2 and a{X2) = [10, 0, 0, 2, 4, . . .]. Since the degree 
6 place Q of -E is the only ramifying place in each curve Xi, i — 1,2, we have 
that aQ{Xi) has to be odd, while 07 (X^) has to be even. We can now determine a 
parametric form for the real Weil polynomial of each curve Xf. 

i) For the curve Xi the values of #Xi(F2) — ai = 10, 02 = 03 = 0, 04 = 4 and 
a^ — 2 allow to determine the following parametric form: 

h{t) ^f + if + 13i^ - m^ - 45i^ - 21^2 + at + li. 

One can check that only for the values of (a, /3) = (26, 16) and (a, (i) = (27, 18) 
all roots of h{t) lie in the interval [— 2-\/2, 2-\/2]. Only the first pair gives an odd 
number of degree 6 places, namely aQ{Xi) = 5. In this case 07(^1) = 18. 



ii) For the values a{X2] 
nomial 

h{t)^ 



~ [10, 0, 0, 2,4,.. .] we have the parametric real Weil poly- 
t^ + It^ + nr' - 9t^ - Alt^ - 33i^ + at + l3. 



In this case there are three pairs of values of (a,/3) for which h{t) has all roots 
in the interval [— 2-\/2, 2-\/2]: the pair (3, 2), which gives ag — 10; the pair (4,4), 
which gives og = 11; and the pair (5, 7), for which ag = 12. Hence the real Weil 
polynomial of X2 corresponds to the unique pair (a, /3) = (4, 4) for which ag is 
not even. In this case a-j = 12. 

D 
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